transitions-polish
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill implements design-system refinements for UI motion. It utilizes standard file system operations to identify and update CSS properties. All external references are to the author's official domain (transitions.dev).
- [INDIRECT_PROMPT_INJECTION]: The skill creates a potential attack surface by processing untrusted project files to drive agent actions.
- Ingestion points: Project-wide scanning of CSS, JavaScript, and configuration files as described in the
transitions reviewcommand. - Boundary markers: The skill does not define specific delimiters for the project code it processes.
- Capability inventory: The skill utilizes the agent's file read and write tools to perform audits and apply changes.
- Sanitization: Risk is mitigated by explicit usage-based matching logic and a mandatory user confirmation step before any file modifications are executed.
Audit Metadata